Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 allows remote attackers to obtain sensitive debugging information by entering a crafted URL to trigger an exception, and then visiting a certain status page.
References
Link | Resource |
---|---|
https://ics-cert.us-cert.gov/advisories/ICSA-15-300-02 | Patch Third Party Advisory US Government Resource |
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2015-10-28 10:59
Updated : 2024-02-28 15:21
NVD link : CVE-2015-7900
Mitre link : CVE-2015-7900
CVE.ORG link : CVE-2015-7900
JSON object : View
Products Affected
infinite_automation_systems
- mango_automation
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor